Latest

►

Cloud Security

Wiz Deal Highlights Google's Multi-Cloud Security Strategy

Michael Novinson  •  July 17, 2025

COO Francis deSouza shares insights into Google Cloud’s security priorities as it pursues the $32 billion acquisition of Wiz. He explains the need for seamless multi-cloud protection, the value of Mandiant's threat intelligence, and how AI is changing threat detection and response at scale.

Cybercrime

Topsy-Turvy Data Breach Reality: Incidents Up, Victims Down

Mathew J. Schwartz  •  July 17, 2025

Data breaches rage on. In the first half of this year, the Identity Theft Resource Center counted 1,732 total data breaches affecting 166 million people, marking a rise in data breaches but a decline in victims, likely due to a drop in mega-breaches.

►

Cyberwarfare / Nation-State Attacks

It's Time to Include Geopolitical Risk in Defense Planning

Anna Delaney  •  July 17, 2025

Geopolitical tensions are no longer limited to headlines or high-level diplomacy. They drive cyber risk, supply chain disruption and regulatory fragmentation. CyXcel's Megha Kumar makes the case for why companies need to take notice and embed geopolitical risks in ongoing security planning.

Governance & Risk Management

Lansweeper Purchases Redjack to Strengthen Asset Discovery

Michael Novinson  •  July 17, 2025

Lansweeper has acquired Redjack to combine detailed scanning with passive discovery, offering real-time asset inventories that fuel zero trust, business continuity and attack surface management. The combined offering enhances support for cybersecurity through automation and real-time data.

Application Security

UK NCSC Announces Software Vulnerability Initiative

Akshaya Asokan  •  July 16, 2025

The U.K. NCSC will collaborate with industry experts for vulnerability detection and mitigation as part of its latest Vulnerability Research Initiative. The announcement comes on the heels of funding concerns for the U.S. government-based Common Vulnerabilities and Exposures program.

3rd Party Risk Management

North Korea Floods NPM Registry with Malware

Prajeet Nair  •  July 16, 2025

North Korean threat actors escalated their software supply chain attacks by uploading 67 new malicious packages to the npm Registry as part of the ongoing Contagious Interview campaign. The malware targets open-source JavaScript developers with malware loaders.

Artificial Intelligence & Machine Learning

AI Giants Push for Transparency on Models' Inner Monologue

Rashmi Ramesh  •  July 16, 2025

AI researchers from OpenAI, Google DeepMind and Anthropic and others have urged deeper study into chain-of-thought monitoring, a technique to track how reasoning models arrive at answers. Their joint paper warns that transparency may erode if not prioritized.

Cyberwarfare / Nation-State Attacks

State Department Layoffs Are 'Fracturing' US Cyber Diplomacy

Chris Riotta  •  July 16, 2025

U.S. Secretary of State Marco Rubio's major shakeup of the State Department's operations - including widespread layoffs and controversial restructurings that separate key cyber teams - will hinder U.S. cyber diplomacy as threats continue to escalate, analysts told Information Security Media Group.

Cyberwarfare / Nation-State Attacks

EU Authorities Take Down Pro-Russian Hacktivist Collective

Akshaya Asokan  •  July 16, 2025

A joint operation by European police agencies led to the arrests of two suspected operators of a prolific pro-Russian hacktivist group called NoName057(16). The authorities also seized multiple networks associated with the group, as well as issued arrest warrants against other suspected members.

Mobile Application Security

Jamf Carries Out Another Round of Layoffs, Axing 6% of Staff

Michael Novinson  •  July 16, 2025

Jamf will execute its second round of layoffs in two years, cutting 6.4% of its workforce to reduce operating costs and improve operating margins. The Minneapolis-based Apple management and security vendor on Tuesday announced plans to reduce its staff by an estimated 166 employees.

Cybercrime

Hackers Use Backdoor to Steal Data From SonicWall Appliance

Akshaya Asokan  •  July 16, 2025

A cybercrime group used a backdoor in a fully patched SonicWall appliance to steal credentials and may have sold the stolen data to ransomware groups as part of an ongoing campaign, Google Threat Intelligence Group found. The firm attributed the campaign to a cybercrime group it tracks as UNC6148.

Cloud Security

Drive-By Attack Vector Patched in Oracle Code Editor

Mathew J. Schwartz  •  July 16, 2025

Exploring Oracle Cloud Infrastructure, researchers at Tenable found that Oracle's console-based Code Editor tool failed to block arbitrary file uploads, and could be silently exploited via drive-by attacks to install malware. They said Oracle has now fixed the vulnerability.